After investors, regulators home in on risk issues